Mid-Level Vulnerability Management Analyst

Mid-Level Vulnerability Management Analyst

Location:

Bethesda, Maryland Type:
Direct Hire / Perm Work Model: 99% remote with occasional onsite for meetings Security Clearance:
Public Trust

Position Summary The Mid-Level Vulnerability Management Analyst performs vulnerability scanning, analysis, reporting, remediation tracking, and stakeholder coordination across NIH/OD-managed systems.

Key Responsibilities

• Perform scheduled and ad hoc credentialed vulnerability scans.
• Review and analyze vulnerability scan results.
• Identify critical and known exploited vulnerabilities.
• Monitor the CISA KEV Catalog and other approved sources.
• Notify technical contacts of vulnerabilities and configuration issues.
• Develop remediation recommendations.
• Track vulnerabilities through closure and validate remediation.
• Support High Value Asset assessments.
• Prepare recurring and ad hoc vulnerability reports.
• Maintain documentation and support process improvements.

Minimum Qualifications

• Bachelor's degree in Cybersecurity, Computer Science, Information Technology, or related field.
• 3–6 years of cybersecurity experience with vulnerability management.
• Experience with enterprise vulnerability management platforms.
• Knowledge of CVEs, CVSS, KEVs, NIST guidance, and FISMA.
• Strong analytical and communication skills.

Recommended Certifications

• CompTIA Security+
• CompTIA CySA+
• GIAC Certified Vulnerability Assessor (GCVA)
• ISC2 Certified in Cybersecurity (CC)
• Tenable Certified Professional
• Qualys VMDR Certification